EwfMgrRestore

Article
10/07/2008

This function restores one overlay level on the specified Enhanced Write Filter (EWF)-protected volume, discarding all changes in the current level.

  BOOL EwfMgrRestore(
    HANDLE 
  hDevice
  );

Parameters

hDevice
[in] Handle to the EWF-protected volume.

Return Values

If the function succeeds, the return value is TRUE. If the function fails, the return value is FALSE. Call GetLastError for extended error information.

Remarks

The overlay is restored on the next restart and is supported for disk overlays only. The API ignores this function when it is called on RAM-based overlays.

If the current level is greater than 1, the data that is contained in the current level is discarded and the current level is decremented by 1.

If the current level is 1, all data that is contained in the current level is discarded and the current level is set to 1 with a new overlay.

Requirements

OS Versions: Windows XP Embedded.
Header: Ewfapi.h.
Link Library: Ewfapi.dll, Ewfapi.lib.

Code Example

The following routine(s), which are included in the EWF API Code Sample (Sample.cpp), demonstrate how to use this function:

DoEwfRestore